5

CVE-2014-1748

The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to spoof the UI by extending scrollbar painting into the parent frame.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
GoogleChrome Version <= 35.0.1916.113
GoogleChrome Version35.0.1916.0
GoogleChrome Version35.0.1916.1
GoogleChrome Version35.0.1916.2
GoogleChrome Version35.0.1916.3
GoogleChrome Version35.0.1916.4
GoogleChrome Version35.0.1916.5
GoogleChrome Version35.0.1916.6
GoogleChrome Version35.0.1916.7
GoogleChrome Version35.0.1916.8
GoogleChrome Version35.0.1916.9
GoogleChrome Version35.0.1916.10
GoogleChrome Version35.0.1916.11
GoogleChrome Version35.0.1916.13
GoogleChrome Version35.0.1916.14
GoogleChrome Version35.0.1916.15
GoogleChrome Version35.0.1916.17
GoogleChrome Version35.0.1916.18
GoogleChrome Version35.0.1916.19
GoogleChrome Version35.0.1916.20
GoogleChrome Version35.0.1916.21
GoogleChrome Version35.0.1916.22
GoogleChrome Version35.0.1916.23
GoogleChrome Version35.0.1916.27
GoogleChrome Version35.0.1916.31
GoogleChrome Version35.0.1916.32
GoogleChrome Version35.0.1916.33
GoogleChrome Version35.0.1916.34
GoogleChrome Version35.0.1916.35
GoogleChrome Version35.0.1916.36
GoogleChrome Version35.0.1916.37
GoogleChrome Version35.0.1916.38
GoogleChrome Version35.0.1916.39
GoogleChrome Version35.0.1916.40
GoogleChrome Version35.0.1916.41
GoogleChrome Version35.0.1916.42
GoogleChrome Version35.0.1916.43
GoogleChrome Version35.0.1916.44
GoogleChrome Version35.0.1916.45
GoogleChrome Version35.0.1916.46
GoogleChrome Version35.0.1916.47
GoogleChrome Version35.0.1916.48
GoogleChrome Version35.0.1916.49
GoogleChrome Version35.0.1916.51
GoogleChrome Version35.0.1916.52
GoogleChrome Version35.0.1916.54
GoogleChrome Version35.0.1916.56
GoogleChrome Version35.0.1916.57
GoogleChrome Version35.0.1916.59
GoogleChrome Version35.0.1916.61
GoogleChrome Version35.0.1916.68
GoogleChrome Version35.0.1916.69
GoogleChrome Version35.0.1916.71
GoogleChrome Version35.0.1916.72
GoogleChrome Version35.0.1916.74
GoogleChrome Version35.0.1916.77
GoogleChrome Version35.0.1916.80
GoogleChrome Version35.0.1916.82
GoogleChrome Version35.0.1916.84
GoogleChrome Version35.0.1916.85
GoogleChrome Version35.0.1916.86
GoogleChrome Version35.0.1916.88
GoogleChrome Version35.0.1916.90
GoogleChrome Version35.0.1916.92
GoogleChrome Version35.0.1916.93
GoogleChrome Version35.0.1916.95
GoogleChrome Version35.0.1916.96
GoogleChrome Version35.0.1916.98
GoogleChrome Version35.0.1916.99
GoogleChrome Version35.0.1916.101
GoogleChrome Version35.0.1916.103
GoogleChrome Version35.0.1916.104
GoogleChrome Version35.0.1916.105
GoogleChrome Version35.0.1916.106
GoogleChrome Version35.0.1916.107
GoogleChrome Version35.0.1916.108
GoogleChrome Version35.0.1916.109
GoogleChrome Version35.0.1916.110
GoogleChrome Version35.0.1916.111
GoogleChrome Version35.0.1916.112
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.53% 0.714
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://security.gentoo.org/glsa/glsa-201408-16.xml
http://secunia.com/advisories/60372
http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html
http://secunia.com/advisories/59155
http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html
http://secunia.com/advisories/58920
http://www.debian.org/security/2014/dsa-2939
http://www.securitytracker.com/id/1030270
http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html
http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html
http://support.apple.com/kb/HT6596
http://www.ubuntu.com/usn/USN-2937-1
https://code.google.com/p/chromium/issues/detail?id=331168
https://src.chromium.org/viewvc/blink?revision=170625&view=revision